Open-Source

MobARK (Mobile Application Reverse Kit) is a self-hosted, open-source mobile appsec platform for Android and iOS that pairs static analysis with a built-in AI Agent. Its defining feature is an AI Agent that chats with your decompiled code through a local LLM (Ollama, LM Studio, or BYOK), so no binary or source data leaves your infrastructure by default. It is Apache-2.0 licensed, requires Python 3.11+ and Node 18+, and runs as a four-container Docker Compose stack. This review covers its features, privacy model, limitations, and how it compares to MobSF and commercial MAST tools in 2026. ...

OpenSheet is an in-browser spreadsheet framework built specifically for AI agents, letting them read, query, and directly edit cells in CSV and Parquet files without sending your data to a cloud server. It runs on duckdb-wasm for local processing and evolved from the author’s earlier DataKit project. This review explains how it works, why spreadsheets are uniquely hard for LLMs, and how it compares to the growing field of spreadsheet agents. ...

A self-updating weekly radar of trending GitHub repos is a scheduled pipeline that scrapes github.com/trending or the GitHub search API, deduplicates and ranks the results, and emits a markdown digest to your repo or blog with zero manual effort. In 2026, when AI tooling can add 100,000+ stars in a week, a manual weekly roundup is no longer fast enough. This guide shows you how to build one with GitHub Actions. ...

CyberForge is a Python-based, modular cybersecurity LLM agent framework built for lab environments, VM research, adversary emulation, detection engineering, and purple team automation. It decouples reusable BaseAgent and BaseTask classes, supports six or more LLM providers (Gemini, NVIDIA NIM, OpenRouter, OpenAI, Anthropic, and local Ollama), and ships a deterministic offline Lab Mock Mode so you can prototype agent workflows with zero API spend. This review walks through what it does, how it runs, and whether it earns a place in your SOC toolkit. ...

Moli is a production-ready, structured-first browser engine for AI agents, written in pure Rust. It runs real JavaScript, DOM, and browser APIs by default, but computes layout or pixels only when you ask — a cost model built for crawling, browser-use, and retrieval workloads. In a 192-URL crawl it beat Chrome Headless on useful-page rate while using roughly 10x less memory. What Is Moli? A Structured-First Browser Engine for AI Agents Moli is not another Chromium wrapper. It is a browser kernel built from the ground up in Rust, designed around a single idea: AI agents mostly want the structure of a page — the DOM, the computed styles, the text — not a rendered picture of it. Traditional headless browsers spend enormous effort producing pixels that most agent workloads never look at. ...

Density is an open-source flight recorder for AI agents that solves the growing problem of agent trace storage bloat. Instead of deleting traces to save space, Density compresses them into a tiered storage system — HOT, WARM, and COLD — with verifiable recall guarantees at each tier. It achieves up to 50.6x compression on traces and 32x on embeddings while maintaining recall above 0.99, making it the first storage-layer observability tool that lets you keep everything without guessing what you will lose. ...

What Is Clai? — Stdin to LLM to Stdout Clai is a command-line AI tool that reads text from standard input, sends it to a large language model, and writes the response to standard output. That is it. No interactive REPL, no session state, no chat history, no plugin ecosystem, no GUI. Written in Go and released as a single binary, Clai embodies the Unix philosophy: do one thing well and compose with other tools via pipes. At version 0.3.0 as of July 2026, it is an early-stage project with a clear philosophical stance that sets it apart from every other AI CLI tool on the market. ...

TokenBar is a free, open-source macOS menu bar application that tracks AI token usage and API spending across 25+ coding agents entirely on your local machine. Built as a native Swift rewrite of the earlier Tauri-based tokcat, TokenBar gives developers real-time visibility into how many tokens Claude Code, Codex, Cursor, Copilot, Gemini CLI, and two dozen other agents consume — without sending any data to external servers or requiring an account. ...

Introduction — The $0/Month AI Company Is Real Yes, you can run a full fleet of AI agents on Google’s Gemini 2.5 Flash free tier at absolutely zero monthly cost. A solo developer in Taiwan proved this by building a 4-agent company — CEO, Social Media Manager, Security Monitor, and Advisor — that executes 105 automated tasks every day using only 7% of the free tier’s 1,500 daily request limit. With total infrastructure costs of roughly $5 per month (Vercel Hobby plan and Firebase free tier), this architecture demonstrates that a one-person AI-powered business is not a futuristic fantasy but a practical reality available today. ...

BrowserAct is an open-source browser automation platform purpose-built for AI agents, offering anti-detection capabilities, persistent session management, parallel execution, and a SkillHub marketplace with over 100,000 reusable skills. Unlike traditional testing frameworks or data extraction tools, BrowserAct solves the “last mile” problem of AI agents: actually executing actions inside real, protected, and dynamic web interfaces without getting blocked, losing state, or breaking on every page change. What Is BrowserAct? — The Browser Layer for AI Agents BrowserAct positions itself as a new category of infrastructure: the browser layer for AI agents. While most AI agent frameworks focus on reasoning, planning, and tool calling, they consistently fail at the execution layer — actually navigating real websites that employ Cloudflare, reCAPTCHA, Datadome, login walls, and session timeouts. ...